VulnerabilityModified
CVE-2024-27835
An attacker with physical access to an iOS device may be able to access notes from the lock screen.
LOW 2.4EPSS 0.25%
Does this matter?
Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen.
- CVSS 3.1
- 2.4 LOWCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.25% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- apple/ipados · apple/iphone os
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/120905
- http://seclists.org/fulldisclosure/2024/May/10Mailing List
- https://support.apple.com/en-us/HT214101Vendor Advisory
- https://support.apple.com/kb/HT214101Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.